Correced default URL for callback in AuthHandler